ISO 22301 Business Continuity (Lead Auditor level) course

1.990,00 € iva esclusa

A 40-hour course based on ISO 22301:2019 for those who want to lead third-party audits of business continuity management systems (BCMS). The programme combines the standard’s requirements with the ISO/IEC 17021-1 certification methodology and the ISO 223xx family, and prepares participants for the Lead Auditor qualification exam, with exercises and a mock exam.

Description

The ISO 22301 Business Continuity course (Lead Auditor level) is an advanced programme that prepares participants to lead third-party audits for ISO 22301:2019 certification, combining the BCMS requirements with the certification methodology (ISO/IEC 17021-1) and the ISO 223xx family.

Taught by Dott.ssa Valentina Grazia Sapuppo, the course is delivered live, online or in person, with exercises, case studies and a mock exam that walks through a complete audit, from the programme to the report and the certification decision.

40
Hours
20
Modules
5
Lessons
Live
Synchronous
Course information
Instructor
Dott.ssa Valentina Grazia Sapuppo
Level
Lead Auditor
Training area
Audit
Delivery
Synchronous, online or in person
Schedule
Shared upon enrolment
Participants
Classes of 4 to 12 participants
Who it is for
  • Third-party auditors
  • Lead auditors from other schemes requalifying
  • Senior business continuity managers
  • Consultants
  • Certification body professionals
Objectives and expected outcomes

The course develops the knowledge needed to sit the qualification exam as a third-party BCMS Lead Auditor, which is taken separately.

By the end of the course, participants will:

  • have an in-depth understanding of the ISO 22301:2019 requirements and the guidance of the ISO 223xx family;
  • assess the BIA, risk assessment, strategies, procedures and exercise programme;
  • understand the accreditation and certification scheme for the BCMS under ISO/IEC 17021-1;
  • plan the audit programme, audit time and team composition, ensuring competence and impartiality;
  • lead Stage 1 and Stage 2 audits, record nonconformities with a risk-based approach and contribute to the certification decision.

Main topics

ā—BCMS and ISO 22301:2019 ā—The ISO 223xx family
ā—BIA and risk assessment ā—Strategies, procedures and emergencies
ā—Plan exercises and testing ā—Accreditation and ISO/IEC 17021-1
ā—Stage 1 and Stage 2 ā—Audit conduct and certification decision

Course programme

01 The BCMS and ISO 22301:2019: harmonised structure and the PDCA cycle
02 The ISO 223xx family: 22313 (guidance), 22316 (organizational resilience), 22317 (BIA), 22331 (strategy), 22332 (procedures), 22320 (emergencies)
03 Context of the organisation and interested parties (clause 4)
04 Leadership, policy and roles (clause 5)
05 Planning: risks and opportunities, business continuity objectives (clause 6)
06 Business Impact Analysis (BIA): methodology and critical issues (ISO/TS 22317)
07 Business continuity risk assessment
08 Business continuity strategies and solutions (ISO/TS 22331)
09 Business continuity procedures and incident response structure (ISO/TS 22332)
10 Emergency management and crisis communication (ISO 22320)
11 Support: resources, competence, awareness and communication (clause 7)
12 Operation and business continuity plans (clause 8)
13 Exercise programme and plan testing (clause 8.6)
14 Performance evaluation and management review (clause 9)
15 Improvement and nonconformity (clause 10)
16 Accreditation and certification: ISO/IEC 17021-1 and the BCMS certification scheme
17 Audit programming and audit time; team competence and impartiality
18 Stage 1 and Stage 2: document review and verification of effective implementation
19 Conducting the audit: meetings, sampling, interviews, evidence; risk-based nonconformities and the certification decision
20 Mock exam and end-to-end audit: from the programme to the report and the certification decision

The programme is complemented by exercises, case studies, a mock exam and a final learning assessment.

Prerequisites

Solid knowledge of ISO 22301 (Implementer and/or Internal Auditor level) and audit experience according to ISO 19011. No preparatory courses or specific digital skills are required.

Methodology and materials

Exercises and case studies
Practical exercises and case studies on third-party BCMS audits.
Complete audit kit
A complete audit kit, with slides and summary cards.
Mock exam
A simulated end-to-end audit, from the programme to the report and the certification decision.
Assessment
Final learning assessment.

Certificate of attendance

A certificate of attendance is issued at the end of the course.